Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e27282dc-cfa5-3a6f-8b5b-40cdf0c76f1c.roa
File:                     e27282dc-cfa5-3a6f-8b5b-40cdf0c76f1c.roa (raw, json)
Hash identifier:          NPHXZ7augbcWFD7UtQY/1z3nGfTrv4v7qTT24/zwXaw=
Subject key identifier:   8A:F6:EA:7C:19:F9:44:55:6D:B7:F8:29:FF:9C:57:4B:02:37:65:05
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D143D466F1A8B16B0D25AEF00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e27282dc-cfa5-3a6f-8b5b-40cdf0c76f1c.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19886
IP address blocks:        171.162.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:46:6f:1a:8b:16:b0:d2:5a:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9c632b86-a6c3-42f1-8ea4-8fa7694f9462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:84:9c:56:0d:db:e1:df:32:cd:7f:7f:9f:
                    5a:6d:8f:70:45:31:00:76:1b:74:a7:d6:79:ce:e7:
                    7e:08:b4:1a:dd:6a:19:a9:b2:dc:91:23:b8:37:ff:
                    f2:cc:6d:dc:e4:c8:71:d3:77:53:d4:c4:bc:e1:da:
                    ab:97:c6:5a:6b:a2:35:66:62:f7:ca:0a:69:af:96:
                    9f:62:68:bc:af:5d:e8:9b:50:77:66:33:81:7d:6e:
                    d7:ea:35:63:58:1d:51:17:c9:39:3d:a4:d4:b7:5b:
                    78:75:b5:88:b2:33:7a:4c:ec:6f:6a:10:22:ac:bd:
                    7c:4b:2b:7d:9d:fa:8b:ea:27:a6:cc:4a:49:ce:5d:
                    a5:95:51:1f:d2:a6:e6:cd:b7:d9:21:b8:22:87:1c:
                    ac:7e:2f:ac:25:64:a7:56:2d:8b:cb:f9:74:0e:3d:
                    98:09:4c:d8:08:ff:c8:b1:d7:b3:55:24:17:67:c8:
                    9c:f9:48:8e:a7:0e:c4:46:44:cd:50:f8:a9:2e:92:
                    58:2a:18:eb:f7:53:79:eb:e8:bf:ad:3f:66:8f:2e:
                    42:83:02:05:7b:7d:28:6e:5f:c7:84:00:04:2f:3f:
                    e2:f3:d9:ee:64:7c:fb:84:79:34:89:02:4c:04:04:
                    67:57:bd:3d:11:23:15:18:8f:00:9b:9c:81:bb:cc:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:EA:7C:19:F9:44:55:6D:B7:F8:29:FF:9C:57:4B:02:37:65:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e27282dc-cfa5-3a6f-8b5b-40cdf0c76f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:00:8b:b9:40:c0:8d:19:d9:a8:d9:90:63:14:c5:ac:63:
         55:f5:9f:36:53:45:6c:2d:28:80:e7:6e:29:42:d5:ed:f2:83:
         16:94:65:98:05:6e:ea:f5:e9:7d:4e:83:5f:2c:5a:a0:86:10:
         ea:d4:55:82:3e:7c:13:1d:ca:3c:34:cd:ac:6c:1c:e2:93:01:
         e6:46:17:bb:be:09:74:99:fc:22:6e:38:55:3a:8c:51:9e:90:
         6b:d1:9f:4b:51:8a:a8:d9:e4:cb:16:5f:5e:30:6e:d7:8e:44:
         7e:a7:17:c4:19:c9:b7:0c:91:e0:07:ed:1e:15:87:46:4f:c4:
         4a:4a:60:45:4f:ef:f6:3a:e7:c3:33:60:99:5c:f5:97:df:e5:
         ce:06:6d:50:cc:d1:5b:8a:56:ad:40:04:65:8d:e6:74:a9:34:
         af:93:de:55:d7:0b:79:dc:70:df:5a:95:38:72:34:33:6d:e7:
         94:ba:f6:03:b3:37:72:c9:fd:87:06:7b:b1:43:8d:aa:a1:44:
         d8:09:90:6a:34:39:bc:87:15:bd:0c:e8:05:05:45:0d:cc:1b:
         9d:cb:16:11:d4:f8:eb:29:bf:55:fe:67:d3:d4:3f:12:80:58:
         65:0b:65:7f:28:0f:70:56:d8:15:60:2a:78:27:72:69:ba:a6:
         1d:16:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:58 2026 by rpki-client